Nitori Holdings reports potential leak of up to 37.6 million pieces of personal data

Nitori Holdings, a major furniture and interior goods company, announced on November 9, 2026, that it has experienced a potential data breach involving a significant amount of personal information. The company disclosed that a third party gained unauthorized access to its internal systems, potentially compromising up to 37,620,000 pieces of data. While the company has taken steps to secure its systems, the scale of the incident has raised concerns regarding the privacy of its extensive customer base.

Details of the unauthorized access

The company reported that the unauthorized access was first discovered on November 6, 2026. Upon identifying the intrusion, Nitori Holdings acted immediately to block the unauthorized access on the same day. According to Japanese media, the unauthorized access likely occurred between mid-to-late October 2026.

The scope of the potential leak is extensive. The information involved may include names, addresses, phone numbers, email addresses, membership numbers, dates of birth, and gender. Furthermore, Japanese media reported that the leaked data may also include corporate member company names, details regarding contact persons, and specific order data. While the volume of data is high, Nitori Holdings clarified that credit card information and login passwords were not included in the potential leak, which may mitigate some immediate financial risks for affected individuals.

Investigation and business impact

Nitori Holdings is currently conducting a thorough investigation to determine the exact cause of the breach. The company is also working to establish the full scope of the impact and is monitoring whether any secondary damage has occurred as a result of the unauthorized access. There is ongoing discussion regarding the specific number of records involved; while the company cited a figure of 37,620,000 pieces, Japanese media reported the potential leak as being up to approximately 38 million pieces.

Despite the massive scale of the potential data exposure, the company has expressed a level of stability regarding its financial outlook. Japanese media reported that Nitori Holdings expects the impact on its consolidated business results to be limited at this time. The company continues to focus on its internal investigation to prevent further complications.

What happens next

As the investigation continues, the company will likely need to provide further updates regarding the specific individuals whose data may have been compromised. For customers and corporate members, the primary concern remains the potential misuse of the personal details that were part of the leak, such as contact information and membership details. While the exclusion of passwords and credit card data provides a layer of security, the exposure of names, addresses, and order history remains a significant privacy matter that the company is currently working to resolve.